Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa
File: 209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa (raw, json)
Hash identifier: xL3wVQf4HTcVM/wz6hyEM+zk4rHf981t9m4Mvz3XbfQ=
Subject key identifier: 5A:77:D3:92:09:F1:55:0C:96:6A:18:C6:D4:BC:CB:E6:BA:30:17:8B
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CEC6E7F925E50A5E8200
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 66.118.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ce:c6:e7:f9:25:e5:0a:5e:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=f23af59f-d798-4a38-b734-edd9aa9eb240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:94:7f:a9:06:0f:85:f8:e3:45:4e:98:83:
e4:f7:8f:a3:fb:07:37:92:2b:35:20:51:22:91:3e:
4f:ac:f2:f8:c4:b2:0d:6f:38:45:cc:f1:08:e5:ed:
63:ed:d4:ed:c4:dd:e2:48:8f:73:e3:cd:6c:c4:c5:
78:92:86:92:42:e8:b6:0b:8d:96:4d:9e:06:d3:30:
08:de:97:72:41:d5:1e:30:f1:a4:a5:d4:1d:51:fc:
1b:db:e3:49:0c:93:18:43:97:fe:91:f9:4c:3a:10:
f4:a9:2d:df:70:82:b0:ce:6d:a6:cb:c4:8f:4d:59:
11:0e:75:99:f0:5f:4d:b5:af:86:7b:a5:13:10:af:
10:3e:43:c6:65:0e:bb:1a:51:57:5d:3d:92:ea:e7:
da:c7:b4:99:f2:ad:02:7b:3d:0c:58:b4:4d:4e:09:
e4:b1:ae:72:a0:de:13:54:43:d2:32:02:4d:f8:d8:
7b:49:6e:0d:3b:e6:01:62:94:ad:32:62:ee:7b:ec:
47:4c:82:06:06:ad:54:11:f9:e2:30:ae:17:b1:c2:
36:61:95:a8:59:48:2f:21:b8:77:a8:0f:d2:0d:c4:
48:df:1f:78:58:d4:72:02:18:63:61:e6:52:b3:49:
91:a7:12:56:2d:b8:cc:12:43:a2:35:62:91:22:c3:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:D3:92:09:F1:55:0C:96:6A:18:C6:D4:BC:CB:E6:BA:30:17:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/209e52a9-7ad0-3d3d-8ea9-9ec96c6908e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:c9:29:07:4f:95:af:db:da:bc:4c:f3:3a:cc:7e:d1:3a:b2:
87:f2:01:42:96:1e:20:0f:da:44:80:cb:ff:af:f1:f8:b3:67:
d2:c4:81:c3:fa:1e:0b:27:66:f6:b3:11:03:e2:b6:cb:20:35:
81:cd:40:78:ea:2a:9e:23:98:c3:a6:00:66:62:13:81:fb:40:
d8:96:d1:34:9d:15:82:6b:ab:88:5c:bf:29:48:4f:db:e4:a2:
60:4f:2e:f9:c9:ba:05:81:e1:98:19:32:43:8a:c9:92:18:11:
73:74:09:ca:dc:50:12:75:19:6a:0d:a6:ca:78:9f:07:ca:c0:
2a:de:21:97:bd:1a:2b:37:25:ce:f8:3d:e6:b6:88:d3:e0:28:
d3:fd:b5:01:44:60:db:c8:40:13:d3:c6:07:2e:5c:af:6b:cd:
cb:76:21:e5:b7:2d:6a:19:e3:cf:e6:04:f6:dc:13:37:1b:85:
a9:c2:24:86:03:fa:34:bd:ff:e5:60:c2:b4:15:08:47:4f:06:
eb:e2:59:a6:16:29:fa:46:c4:3c:1f:2d:74:f6:a4:49:a5:ed:
5b:cb:b4:84:c7:e4:77:69:e2:2c:4a:1b:ca:35:8f:07:1f:a4:
74:42:16:5c:8d:e3:3a:c4:50:b3:2f:9d:3e:43:74:d6:bf:9c:
70:12:e3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:47:21 2025 by rpki-client